Skip to content

How to report a security vulnerability privately? #490

Description

@Poseidonas

I would like to report a security issue in this project privately, but I could not find a channel for it:

  • "Private vulnerability reporting" is not enabled on this repository (Settings → Security), so the "Report a vulnerability" button is not available.
  • There is no SECURITY.md in the repo or at the organization level.

Could you either enable private vulnerability reporting on this repository, or point me to a security contact (e.g. a PSIRT address) so I can send the details privately?

I have a minimal reproducer and a suggested fix ready. I am not including any details here, to avoid public disclosure before a fix is available. Thank you.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions